Malicious Backdoor in xz liblzma

youtu.be

Malicious Backdoor in xz liblzma

youtu.be

cyph3rPunk@infosec.pubM to

cyph3rPunk@infosec.pub · 8 months ago

Backdoor found in xz liblzma specifically targets the RSA implementation of OpenSSH. Story still developing.https://openwall.com/lists/oss-security/2024/03/2…

You must log in or # to comment.

Chat

cyph3rPunk@infosec.pub

cypherpunk@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cypherpunk@infosec.pub

The people in this community hope for a world where an individual’s informational footprints—everything from an opinion on abortion to the medical record of an actual abortion—can be traced only if the individual involved chooses to reveal them; a world where coherent messages shoot around the globe by network and microwave, but intruders and feds trying to pluck them out of the vapor find only gibberish; a world where the tools of prying are transformed into the instruments of privacy. There is only one way this vision will materialize, and that is by widespread use of cryptography. Is this technologically possible? Definitely. The obstacles are political—some of the most powerful forces in government are devoted to the control of these tools. In short, there is a war going on between those who would liberate crypto and those who would suppress it. The seemingly innocuous bunch strewn around this community represents the vanguard of the pro-crypto forces. Though the battleground seems remote, the stakes are not: The outcome of this struggle may determine the amount of freedom our society will grant us in the 21st century. To the Cypherpunks, freedom is an issue worth some risk.

Relevant Links:

“Security is mostly a superstition. It does not exist in nature, nor do the children of man as a whole experience it. Avoiding danger is no safer in the long run than outright exposure. Life is either a daring adventure, or nothing.” Helen Keller

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
14 users / month
83 users / 6 months
2 local subscribers
756 subscribers
70 Posts
108 Comments
Modlog